Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

2 plugin suggestion for improvement

  • Participant
    Level: Guru
    Posts: 900
    Tosin on May 16, 2021 at 9:13 am #38661

    Hello,

    I just want to suggest some improvements to 2 of your plugins which are (Ban Registration Domain) and (Restrict Email Domains) plugins.

    This two plugin only work with buddypress registration can you add a feature to enable the same blacklist to be banned or excluded from wordpress login. So the plugin will now work for both registrations and logins. This will greatly reduce brute force login attempts to an extent. If this can work with branded login plugin would be awesome.

    EXAMPLE
    Any other email/domain extension that is not included in the allowed list should be banned immediately or the ip address should be blocked immediately.

  • Keymaster
    (BuddyDev Team)
    Posts: 24708
    Brajesh Singh on May 16, 2021 at 8:23 pm #38668

    Hi Tosin,
    Thank you for the suggestions. These plugins are targeted at registration(Please see their name).
    Your idea is good but this plugin is not aimed for general use case. We will certainly consider it if we decided to create a general purpose plugin.

    For now, Please use one of the brute force protection plugin. They are much more suited for the job.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved